Network Traffic Visibility and Security for ICS/SCADA

Ensure reliability and security of your industrial network

Back in the olden days, engineers didn’t have to worry about security since Industrial Control Systems were traditionally completely isolated from the enterprise network or internet and nobody could expect any radical modifications to the infrastructure itself. With the rise of IoT devices, automation and Industry 4.0 or interconnecting with enterprise networks, ICS environments face revolutionary changes. To take back control and maintain order of such critical services, IT professionals around the world are turning to Flowmon to get complete network visibility. The solution is designed to provide early detection and response capabilities as well as hard data for disaster recovery planning and retrospective forensic analysis.

Technical Report no. FIT-TR-2020-02 Faculty of Information Technology, Brno University of Technology

Flowmon empowers manufacturers and utility companies to ensure reliability of their industrial networks confidently to avoid downtime and disruption of service continuity. This can be achieved by continuous monitoring and anomaly detection so that malfunctioning devices or security incidents, such as cyber espionage, zero days or malware, can be reported and remediated as quickly as possible. The solution delivers a whole set of enterprise-class features for:

• Real-time network traffic visibility to know what is using the network and how
• Efficient reporting supporting heterogeneous environments, different perspectives and locations
• Proactive detection of threats, botnets, zero days, abuse of unpatchable services and other risks undetectable by signature and rule based solutions
• Automated anomaly detection, quick troubleshooting of network failures and configuration issues

Flowmon SCADA monitoring and security scheme

From their technical nature, firewalls and IPS are only effective for intra zone traffic (between L2 and L3), which might be sufficient for enterprise networks but not for SCADA/ICS environments. Therefore, the most vulnerable mission critical parts of the network remain insecure. Flowmon goes beyond these traditional security approaches when delivering visibility into intra zone (within L2) and thus provides a full insight into the traffic.